Privacy Policy
Last updated: October 5, 2025
1. Introduction
WhenJumpScare ("we", "us", or "our") operates the website whenjumpscare.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.
By using WhenJumpScare, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Personal Information via Google Sign-In
When you create an account using Google OAuth, we collect:
- Name: Your display name from your Google account
- Email address: Your Google email address
- Profile picture: Your Google profile photo (optional)
- Email verification status: Whether your email is verified by Google
2.2 Session and Technical Data
When you use our service, we automatically collect:
- IP address: Your device's IP address for security purposes
- User agent: Browser type and device information
- Session tokens: Authentication tokens to keep you logged in
- Session duration: Creation and expiration dates of your session
2.3 User Contributions
When you contribute to WhenJumpScare, we store:
- Jumpscare timestamps: Time codes, descriptions, and severity ratings you submit
- Contribution history: All timestamps linked to your user account
- Pending submissions: Timestamps awaiting admin approval
- Contribution dates: When you created or updated timestamps
2.4 Contact Form Data
When you contact us via the contact form, we collect:
- Your name
- Your email address
- Your message content
3. How We Use Your Information
We use the collected information for the following purposes:
- Account management: To create and manage your user account
- Authentication: To verify your identity and maintain secure sessions
- Content attribution: To credit you for your jumpscare timestamp contributions
- Community features: To display top contributors and user profiles
- Communication: To respond to your inquiries via the contact form
- Security: To detect and prevent fraudulent activity or abuse
- Service improvement: To analyze usage patterns and improve our platform
4. Third-Party Services
We use the following third-party services that may collect or process your data:
4.1 Google OAuth
We use Google OAuth for authentication. Google's privacy policy applies to data collected during the sign-in process. View Google's Privacy Policy.
4.2 TMDB API
We use The Movie Database (TMDB) API to fetch movie information. TMDB does not receive your personal data. View TMDB's Privacy Policy.
4.3 Vercel (Hosting and Analytics)
Our website is hosted on Vercel. We use Vercel Analytics and Speed Insights for performance monitoring. These services collect anonymized usage data. View Vercel's Privacy Policy.
4.4 Resend (Email Service)
We use Resend to send transactional emails (contact form submissions). Your email and message content are processed by Resend. View Resend's Privacy Policy.
4.5 Google Search Console
We use Google Search Console for SEO monitoring. This service does not collect personal user data from site visitors.
5. Cookies and Tracking
WhenJumpScare uses essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.
- Session cookies: Required to keep you logged in
- Authentication tokens: Stored securely to verify your identity
You can configure your browser to refuse cookies, but this may prevent you from using certain features of the site.
6. Data Retention
We retain your personal data for as long as:
- Your account remains active
- It is necessary to provide you with our services
- Required by law or for legitimate business purposes
If you delete your account, we will delete or anonymize your personal data within 30 days, except for data we are required to retain by law.
7. Your Rights (GDPR)
If you are located in the European Economic Area (EEA), you have the following rights:
- Right of access: Request a copy of your personal data
- Right to rectification: Request correction of inaccurate data
- Right to erasure: Request deletion of your personal data
- Right to restriction: Request limitation of processing
- Right to data portability: Receive your data in a structured format
- Right to object: Object to processing of your data
- Right to withdraw consent: Withdraw consent at any time
To exercise these rights, contact us at contact@whenjumpscare.com.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.
- Secure HTTPS encryption for all data transmission
- Encrypted storage of authentication tokens
- Regular security audits and updates
- Access controls and authentication requirements
9. Children's Privacy
WhenJumpScare is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us immediately.
10. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
We encourage you to review this Privacy Policy periodically for any changes.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Email: contact@whenjumpscare.com
- Website: https://whenjumpscare.com/contact